System Administrator Account Policy

Objective

The purpose of the System Administrator A=
ccount Policy is to ensure that access to allSuffolk systems and/or a=
pplications are properly approved and monitored.

Applicabili=
ty

The Suffolk University System Administrat=
or Account Policy applies to any University System Administrator and any in=
dividual that receives temporary System Administrator access to University =
systems and/or applications.

Definitions

Root System Administrator Account:=
root is the user name or account that by default has access to all command=
s and files on a system.

System Administrator Account=
: An account that has all access permissions, rights, or privileges to a Un=
iversity system and/or application.

Temporary account: An accoun=
t on an as need basis that has rights or privileges to a University Informa=
tion Resource, such as an account for a vendor to do; maintenance, software=
development, software installation =E2=80=93 this account could be an Admi=
nistrative account.

Policy

All departments must submit to the Information Security Officer or Chie=
f Information Officer a list of System Administrators for any University sy=
stems and/or applications. The list shall include the name of the System Ad=
ministrator(s), Telephone Extension, Email Address, Operating System, Syste=
m Name, IP Address and system=E2=80=99s function.

All System Admin=
istrator account users must not abuse their access privilege. =
span>

All System Admin=
istrator Accounts must comply with the =E2=80=9CPassword Policy=E2=80=9D.&n=
bsp;

The password for=
a Root System Administrator Account must change when an individual with th=
e password is no longer affiliated with the University.<=
/li>

University syste=
ms and applications with a single System Administrator must establish a password es=
crow procedure in the event the System Administrator is unavailable.&=
nbsp;

Additionally Tem=
porary System Administrator Accounts must be created with a specific expira=
tion date or be removed when work is completed.

Each System Admi=
nistrator Account must also comply with the =E2=80=9CUser Account Policy=E2=
=80=9D.

Violation of =
Policy

The University reserves the right to moni=
tor network traffic, perform random audits, and to take other steps to insu=
re the integrity of its information and compliance with this Policy. Violat=
ions of this Policy may lead to appropriate disciplinary action, which may =
include temporary or permanent restrictions on access to certain informatio=
n or networks. Willful or repeated violations of this Policy may result in =
dismissal from the University.